Home › Security & Privacy › Lottery Scam Protection
Fake wins · prize fraud · phishing · identity theft

Lottery Scam Protection: How to Spot a Fake Lottery Win

Unexpected “you’ve won” messages are designed to create excitement before you have time to check the story. This guide shows you how fake lottery wins, advance-fee scams, phishing and identity theft work, how to verify a claim without using the scammer's contact details, and where to report lottery fraud in the UK.

Quick scam check

Does this look like a lottery scam?

One warning sign does not prove every message is fraudulent, but several of these together should be treated as a reason to stop and verify independently.

1
You do not remember entering the lottery or drawAn unexpected overseas or online “win” is a classic starting point for lottery fraud.
2
You must pay before the prize is releasedTax, legal, banking, courier, insurance and administration fees are common advance-fee stories.
3
You are asked for passport, bank or login details immediatelyThe supposed prize may be a route to identity theft or account fraud.
4
You are told to act quickly or keep the win secretUrgency and secrecy reduce the chance that you will pause and ask someone else to check.
5
The sender wants you to use only their link, number or agentA genuine organisation can be checked through contact details you find independently.
6
The message looks polished enough to lower your guardGood spelling, a logo, reference number or convincing website are not proof of authenticity.
The 4-step rule

Stop. Break contact. Verify. Report.

Current Report Fraud guidance for suspicious lottery approaches starts with breaking the contact: do not reply, click the supplied links, call the supplied numbers or make a payment. If you want to check the claim, contact the organisation using details you know are genuine.

1 · StopDo not let excitement or urgency set the pace.
2 · Break contactDo not reply or continue the call.
3 · Verify independentlyFind the official organisation yourself.
4 · ReportUse the appropriate official fraud or phishing route.
How lottery fraud works

The fake prize is usually only the beginning

Lottery fraud often develops in stages. The first message creates excitement; later steps extract money, identity documents or financial information.

1. The “win”

You receive an email, text, letter, social message or call claiming you have won a lottery, sweepstake or prize draw.

2. The verification story

You are asked to contact an “agent”, fill in forms or send identification so the claim can supposedly be validated.

3. The fee

A tax, legal, banking, courier or release charge appears. Paying one fee can lead to another.

4. The follow-up

If you engage, fraudsters may seek more money, use your identity details or later approach you with a recovery scam.

Common lottery scams

Fake win, fee and identity scams to recognise

Fake lottery-win notification

You are told you won an overseas, online or unfamiliar lottery that you do not remember entering. The scam relies on the excitement of the supposed prize.

Advance-fee “release” scam

The prize is always just one payment away: tax, legal fees, banking charges, insurance, courier costs or administration.

Identity-document harvesting

Passport, driving-licence, proof-of-address or bank information is requested in the name of “winner verification”.

Phishing link or fake claim website

The message sends you to a cloned or invented site designed to steal passwords, payment details or personal data.

Fake claims officer or agent

A confident caller or email contact acts as the official intermediary and keeps you inside communication channels controlled by the fraudster.

Recovery scam

After an earlier loss, somebody claims they can recover your money for an upfront fee. Previous fraud victims can be targeted again.

Verify before you respond

How to check a lottery win without trusting the message

The safest check starts outside the message itself.

What you haveDo not rely onSafer check
Email or textThe link, reply address or phone number inside it.Find the official lottery or organisation through a trusted search or a website you already know.
Phone callCaller ID or a number the caller tells you to ring back.End the call and use the organisation's published contact details.
WebsiteProfessional design, logos, security icons or a familiar-looking domain.Check the exact domain independently and avoid logging in through an unexpected link.
Financial adviser or firmA Firm Reference Number, website or phone number supplied by the person contacting you.Use the FCA Firm Checker and contact the genuine firm through the details shown there.
Claim documentsSeals, certificates, official-looking forms or legal language.Verify the supposed issuer independently before signing, paying or sending identity documents.
Clone-firm warning: the FCA says fraudsters can copy genuine firm names and mix real registration information with fake email addresses, phone numbers and websites. Checking that a firm exists is not enough — check that the contact details match the FCA's own record.
If you clicked or replied

What to do if you interacted with a suspicious lottery message

You clicked but entered nothing

Close the page and do not return through the message. Follow current NCSC phishing guidance, particularly if anything downloaded or your device behaved unexpectedly.

NCSC phishing guidance ↗

You entered a password

Change that password immediately, including on any other account where you reused it. Protect your email account first if the same credentials were involved.

You entered card or banking details

Contact your bank or payment provider immediately using trusted contact details. Do not wait for an unauthorised transaction to appear.

You sent identity documents

Preserve the messages and make an official fraud report. Report Fraud also advises monitoring your credit file if identity theft may be involved.

UK reporting routes

Where to report a lottery scam in 2026

Action Fraud was replaced by Report Fraud on 4 December 2025. The reporting route now depends on where you are and whether this is an attempted scam or an actual fraud.

England, Wales & Northern Ireland

Use Report Fraud to report cyber crime or fraud to the police. The online reporting hub operates at all times; the contact centre number is 0300 123 2040.

Report fraud or cyber crime ↗

Scotland

Report Fraud says fraud and cyber crime in Scotland should be reported locally to Police Scotland on 101.

See official reporting guidance ↗

Suspicious email

If you have received a suspicious email, the National Cyber Security Centre says you can forward it to report@phishing.gov.uk. Do not click the links first.

NCSC scam-email reporting ↗

Suspicious text

Most UK mobile providers allow suspected scam texts to be forwarded free to 7726, allowing the provider to investigate the sender.

NCSC scam-text reporting ↗

Attempted fraud with no loss

Report Fraud can collect information about bogus lottery approaches even where you did not respond or lose money. These information reports help police understand criminal activity.

Report an attempted fraud ↗

Clone financial firm

Use the FCA Firm Checker and Warning List if an adviser or financial firm contacts you unexpectedly. Always use contact details taken from the FCA record rather than from the caller.

FCA Warning List & Firm Checker ↗
Already a genuine winner?

Real lottery winners face a different scam problem

This page is mainly about fake prize claims: messages saying you won when the prize itself is fraudulent. Once somebody has genuinely won or is publicly known to have substantial money, the risks change to investment fraud, fake advisers, impersonation, romance scams, payment diversion, property fraud and other sudden-wealth targeting.

Read Scams That Target Lottery Winners →

Questions answered

Lottery scam protection FAQs

Practical answers about fake wins, advance fees, suspicious links, reporting and verifying advisers.

Can you win a lottery you never entered?
A genuine lottery prize normally depends on a valid entry. An unexpected message saying you won a lottery you do not remember entering is a major warning sign. Do not use the links or phone numbers in the message; verify the organisation independently.
Do genuine lotteries ask for a fee before releasing winnings?
Unexpected requests for tax, legal, banking, courier, insurance or administration fees before a supposed prize is released are a classic lottery-scam pattern. Stop and verify the claim independently before sending any money.
How can I check whether a lottery win message is genuine?
Do not use the contact details supplied in the message. Find the official lottery or organisation yourself using a trusted source, then check the ticket, account or claim through its published channels.
Can a scam email or text use a real lottery name and logo?
Yes. Fraudsters can copy logos, names, website styling and other genuine details. Branding is not proof that a message, website or caller is genuine.
What if the sender knows my name or other personal details?
That does not prove the approach is genuine. Personal information can come from public social profiles, previous data breaches, marketing lists or earlier scams. Verify the organisation independently.
Why do lottery scammers ask for passport or driving-licence copies?
Identity documents can be used to make the fake claim feel official, but they can also expose you to identity fraud. Do not send identity documents in response to an unexpected prize message without independently confirming the claim and the organisation.
What should I do if I clicked a suspicious lottery link?
Stop using the page, do not enter more information, and follow current NCSC phishing guidance. If you entered a password, change it anywhere it was reused. If you entered banking or card details, contact your bank or payment provider immediately.
What should I do if I already paid a lottery scammer?
Contact your bank or payment provider immediately and explain that you may have made a payment to a fraudster. Then report the fraud through Report Fraud if you are in England, Wales or Northern Ireland, or contact Police Scotland on 101 if you are in Scotland.
Where should I report a lottery scam in the UK?
Report Fraud is the police reporting service for cyber crime and fraud in England, Wales and Northern Ireland. In Scotland, fraud should be reported to Police Scotland on 101.
How do I report a suspicious lottery email or text if I have not lost money?
Suspicious emails can be forwarded to the National Cyber Security Centre at report@phishing.gov.uk. Most UK mobile providers allow suspicious texts to be forwarded free to 7726. Report Fraud also accepts information about attempted fraud.
What is a lottery recovery scam?
After someone has lost money, another fraudster may claim they can recover it for an upfront fee. Report Fraud warns that previous victims can be targeted again in this way. Treat unsolicited recovery offers with extreme caution.
How can I check a financial adviser who contacts me after a lottery win?
Do not rely on the website, phone number or registration details supplied by the caller. Use the FCA Firm Checker and contact the authorised firm through the details shown there. Clone firms can mix genuine firm information with fraudulent contact details.
Are scams targeting real lottery winners covered on this page?
Only briefly. This page focuses on fake wins, prize notifications, advance fees, phishing and identity theft. If you have genuinely won and are worried about investment scams, fake advisers, romance fraud, payment diversion or other approaches to wealthy people, use the separate MLL guide to scams that target lottery winners.
What is the simplest rule for an unexpected lottery-win message?
Stop, do not pay, do not click, and verify independently. A convincing logo, reference number, caller ID or professional-looking website is not enough.
Official sources

Where the fraud advice on this page comes from

This guide uses current UK police, cyber-security and financial-regulator guidance. Scam methods change quickly, so reporting routes and verification advice should be checked against the official services when an incident occurs.

  1. Report Fraud — Lottery scams. Fake wins, advance fees, identity theft, recovery scams and what victims should do.
  2. Report Fraud — Reporting cyber crime and fraud. Current police reporting route for England, Wales and Northern Ireland and Police Scotland route.
  3. Report Fraud — Information reports. How attempted bogus-lottery approaches can be reported even where no money was lost.
  4. NCSC — Report a scam email. Current Suspicious Email Reporting Service.
  5. NCSC — Report a scam text. 7726 guidance for suspicious SMS messages.
  6. FCA — Warning List and Firm Checker. How to identify unauthorised and clone financial firms.